Secure world wide electronic commerce over an open network

• US 5,850,442 A
• Filed: 03/26/1996
• Issued: 12/15/1998
• Est. Priority Date: 03/26/1996
• Status: Expired due to Term

• Current Assignee: Intellectual Ventures II LLC (Intellectual Ventures LLC)
• Original Assignee: Entegrity Solutions
• Inventors: Muftic, Sead
• Primary Examiner(s): CAIN, DAVID C
• Application Number:
  US08/622,015
• Time in Patent Office: 994 Days
• Field of Search: 380/21, 380/23, 380/25, 380/30, 380/49
• US Class Current: 705/65
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 50/188 Electronic negotiation

Abstract

A network of users and servers of a type found in the Internet system is extended to permit secure electronic commercial transactions to be accomplished. The network is extended to include a public key infrastructure and electronic transactions can be securely performed utilizing smart token technology. Conduct of a variety of common electronic business transactions over such an extended network is provided.

Claims

1. A world-wide system/network for the conduct of electronic commercial and non-commercial business transactions based on a global network public key security infrastructure, comprising:

a plurality of user terminals connected to the network, at least some of said user terminals equipped with the ability to read and/or write smart tokens containing one or more encryption keys;

a plurality of application/information servers connected to the network and configured to link to the security infrastructure; and

one or more security servers connected to the network, each for certifying the public keys of users registered to engage in electronic business transactions or the public keys of other security servers,

wherein encryption keys fetched from said security servers are capable of being authenticated by one or more of said user terminals and used to ensure the origin and authenticity of electronic commercial transactions conducted using said user terminals and said application/information servers.

2. The network of claim 1 wherein said application/information servers are selected from the group consisting of world wide web servers, large capacity video, and document or data base servers.

3. The network of claim 1 wherein said one or more security servers link all registered users, companies and other participants into a public key infrastructure.

4. The network of claim 1 wherein user terminals run web browser software and/or E-mail software.

5. The network of claim 1 wherein information about the contents of said application/information servers is obtained using one of an indexing system, electronic white/yellow pages directory, intelligent agents or search and retrieval system.

6. A method of conducting electronic commerce over an unsecured network, comprising:

registering users in a public key infrastructure system by providing encrypting information to the users that is stored in smart tokens of the users, and certifying one or more public keys for each user, the public keys being used to decrypt information that has been encrypted by the corresponding smart token of said each user; and

authenticating electronic transactions using certified public keys that are used to decrypt information that has been encrypted by the smart tokens, wherein a binding between a public key and its owner can be authenticated;

whereby authentic and authorized business transactions can occur in said unsecured network.

7. The method of claim 6 wherein the step of authenticating electronic transactions using a certified public key comprises authenticating offers, counteroffers and acceptance in a contract negotiations process.

8. The method of claim 6 wherein the step of authenticating electronic transactions using a certified public key comprises authenticating offers, bids and/or confirmations of sale in an auction process.

9. The method of claim 6 wherein the step of authenticating electronic transactions using a certified public key comprises authenticating a guarantee.

10. The method of claim 6 wherein the step of authenticating electronic transactions using a certified public key comprises authenticating orders and/or payments in a purchase/sell transaction.

11. The method of claim 6 wherein the step of authenticating electronic transactions using a certified public key comprises authenticating transfers of intangible personal property.

12. The method of claim 6 wherein the step of authenticating electronic transactions using a certified public key comprises authenticating tender offers and/or one or more tenders of shares of stock.

13. The method of claim 6 wherein the step of authenticating electronic transactions using a certified public key comprises authenticating certificates of insurance.

14. The method of claim 6 wherein the step of authenticating electronic transactions using a certified public key comprises authenticating transfers of intangibles related to an escrow transaction.

15. The method of claim 6 wherein the step of authenticating electronic transactions using a certified public key comprises authenticating transfers of electronic money.

16. The method of claim 6 wherein the step of authenticating electronic transactions using a certified public key comprises authenticating transfers of one or more software modules.

17. The method of claim 6 wherein the step of authenticating electronic transactions using a certified public key comprises authenticating transfers of one or more copyrighted documents.

18. The method of claim 6 wherein the step of authenticating electronic transactions using a certified public key comprises authenticating transfers of one or more licensed materials.

19. A method of conducting electronic commerce over an unsecured network, comprising:

authenticating, as to origin, information placed on at least one application/information server of said network;

accessing said information in an authentic and authorized way by outputting information encrypted by a smart token that has a private key used for encryption stored therein;

ordering products or services after accessing said information by sending or exchanging electronic messages that have been encrypted with said private key; and

authenticating said electronic messages as to origin, recipient, or trusted third party,

wherein the step of authenticating said electronic messages as to origin includes validating a public key of a public key/private key pair of a user originating at least one of said electronic messages using digital signatures of one or more certification authorities and using the public key for validation of the at least one of said electronic messages.

20. The method of claim 19 wherein the step of authenticating as to origin information placed on at application/information server unless access information received from said user decrypts and verifies properly using an authorized public key belonging to the application/information server.

21. The method of claim 19 wherein all public keys used in the protocol are validated using a public key infrastructure.

22. The method of claim 19, further comprising the step of indexing said information on an indexing server, which may be the same or different from said application/information server.

23. The method of claim 19, wherein the step of ordering a product or services after accessing said information by sending an electronic message further comprises making an electronic payment.

24. The method of claim 19 wherein all information received from remote client stations are locally processed and coupled with individual data processing applications of the services or goods provider.

25. A world wide system for secure, reliable and authorized electronic transactions and applications performed over computer and data transmission networks, comprising:

a plurality of network servers and associated data bases including application/information servers, indexing and searching servers, addressing servers, security servers, or Trusted Third Parties servers;

a plurality of types of multifunctional and multipurpose client stations, with user interaction tools, functions and interfaces for different types of electronic transactions; and

a plurality of electronic business transactions protocols to access servers, to fetch information, data and services and to perform a plurality of electronic business transactions.

26. The system of claim 25, wherein the system is capable of performing official electronic registration of participants containing distinguished names, any other identification attributes, addressing and accessibility information, and professional information.

27. The system of claim 25, wherein the system is capable of being used for establishment of business and authorization profiles of participants, both companies and individuals, required in order to perform specific authorized electronic transactions.

28. The system of claim 25, wherein the system is capable of being used for controlled insertion, storage and distribution of authentic information about various products and services in a form of one or more of multimedia catalogs, brochures, sound and video advertising materials, and electronic "yellow pages", based on usage of application/documents servers and browsers.

29. The system of claim 25, wherein the system is capable of being used for electronic ordering of goods, products and services, for various financial transactions, and for various other types of business, commercial and non-commercial transactions, all enhanced with security features.

30. The system of claim 25, wherein the system is capable of being used as support for negotiation and establishment of electronic commerce documents and electronic financial transactions enhanced with digital signatures and security features.

31. A method for encoding a smart token for use in electronic commerce over an unsecured network, comprising:

sending over the unsecured network, by a user at a user terminal to a certification server, an application for encoding the smart token;

determining, by the certification server, whether the user is authorized to encode the smart token;

sending, from the certification server to the user terminal, information as to whether the user has been authorized or disapproved from encoding the smart token;

if the user has been authorized to obtain the smart token, sending information for encoding the smart token from the certification server to the user terminal over the unsecured network,

wherein the user is capable of conducting electronic commerce transactions over the unsecured network using the encoded smart token, and

wherein an application/information server connected on the unsecured network is capable of determining whether the user is authorized to edit any programs stored within the application/information server by comparing information encoded with a private key from the smart token of the user with information stored at the application/information server that corresponds to public keys of all authorized entities that are allowed to edit the programs stored within the application/information server.

32. The method of claim 31 wherein the smart token includes encryption keys that are utilized to ensure secure and authentic transactions between the user at the user terminal and another device connected to the unsecured network.

33. The method of claim 32, further comprising:

verifying, by sending a request from the another device to a security server, whether a public key of the user accessing the another device is certified,

wherein, if the public key of the user is certified, the user is authorized to conduct electronic money transactions with the another device.

34. The method of claim 32, wherein the smart token is a physical card that is encoded with software received from the certification server when the user is authorized, and

wherein the user is capable of utilizing the smart token to provide encoded information sent over the unsecured network with the private key of the user, and

wherein the user is capable of using the smart token as a credit card or a debit card for conducting commercial transactions at physical locations separate from the unsecured network.

35. A system for conducting electronic commerce transactions over an unsecured network, comprising:

at least one user terminal connected to the unsecured network, the at least one user terminal configured to read and write smart tokens containing at least one encryption key stored therein;

at least one application/information server connected to the unsecured network and configured to link to a security infrastructure within the unsecured network; and

at least one security server connected to the unsecured network and configured to certify public key of users registered to engage in the electronic commerce transactions over the unsecured network,

wherein the at least one application/information server sends a request for authentication to the at least one security server for verification of a particular public key received from the at least one user terminal when the at least one user terminal desires to conduct a particular electronic commerce transaction over the unsecured network with the at least one application/information server,

wherein the at least one security server determines whether the at least one user terminal has been previously registered and certified to conduct the electronic commerce transactions and has a valid smart token, and

wherein the at least one application/information server receives information from the at least one security server concerning whether the user is authorized and allows the particular electronic commerce transaction to take place if the user is authorized.

36. The system of claim 35, wherein the particular electronic commerce transaction takes place between the at least one user terminal and the at least one application/information server by the at least one user terminal encoding data with a private key from the smart token and outputting the encoded data to the at least one application/information server over the unsecured network, and by the application/information server using a public key of the user obtained from the at least one security server to decode the received data over the unsecured network to determine what type of electronic commerce transaction is desired by the user.

37. A method of conducting electronic commerce over an unsecured network, comprising:

registering a user in a public key infrastructure system by obtaining a registration request from the user over the unsecured network and determining that the user is authorized to conduct electronic commerce over the unsecured network;

sending information for encoding a smart token to the user over the unsecured network, the encoded smart token to be used by the user to conduct the electronic commerce over the unsecured network;

requesting a particular electronic commerce transaction between the user and an application/information server, the request being made over the unsecured network;

determining, by the application/information server, whether the user is authorized to conduct the particular electronic commerce transaction by requesting authorization of the user from a security server; and

if the user has been determined to be authorized, then utilizing, by the application/information server, a certified public key of the user to conduct the particular electronic commerce transaction between the user and the application/information server,

wherein the user utilizes a private key obtained from the smart token to conduct the particular electronic commerce transaction between the user and the application/information server.

38. A method of conducting electronic commerce over an unsecured network, comprising:

authenticating, as to origin, information received by at least one application/information server over the unsecured network, the authenticating being performed by determining whether the information received over the unsecured network is capable of being decoded using an authorized public key of the least one application/information server;

if the authenticating step determines that the origin is not an authorized origin, denying access to the at least one application/information server by a user that sent the information;

if the authenticating step determines that the origin is an authorized origin, allowing access to the at least one application/information server to conduct an electronic commerce transaction between the origin and the at least one application/information server; and

authenticating electronic messages sent between the origin and the least one application/information server throughout the conducting of the electronic commerce transaction as to source, destination, or trusted third party.